The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-headers | Dec 1, 2016 | Oct 23, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Oct 23, 2011 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-ppc64-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade kernel-ppc64Upgrade kernel-traceUpgrade kernel-xenUpgrade kernel-default-manUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-trace-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-generic | Nov 8, 2024 | Oct 23, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 23, 2011 | Oct 23, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub